RHSA-2026:9446

Vulnerability from csaf_redhat - Published: 2026-04-21 17:40 - Updated: 2026-04-28 14:08
Summary
Red Hat Security Advisory: gstreamer1-plugins-bad-free, gstreamer1-plugins-base, and gstreamer1-plugins-good security update
Severity
Important
Notes
Topic: An update for multiple packages is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer. Security Fix(es): * GStreamer: GStreamer: Remote Code Execution via heap-based buffer overflow in JPEG parser (CVE-2026-3082) * GStreamer: GStreamer: Remote Code Execution via Heap-based Buffer Overflow in rtpqdm2depay (CVE-2026-3085) * GStreamer: GStreamer: Arbitrary code execution via RIFF palette integer overflow in AVI file handling (CVE-2026-2921) * GStreamer: GStreamer: Remote Code Execution via Out-Of-Bounds Write in rtpqdm2depay (CVE-2026-3083) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
CVE-2026-2921

A flaw was found in GStreamer. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. The flaw exists within the handling of palette data in AVI files, where a lack of proper validation of user-supplied data can lead to an integer overflow before writing to memory. An attacker can leverage this integer overflow to execute code in the context of the current process.

7.8 (High)
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE-190 - Integer Overflow or Wraparound
Vendor Fix For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 https://access.redhat.com/errata/RHSA-2026:9446
Workaround To mitigate this issue, avoid processing untrusted AVI media files with applications that use the GStreamer library. Users should exercise caution when opening or playing AVI files from unknown or suspicious sources.
CVE-2026-3082

A flaw was found in GStreamer. A remote attacker can exploit a heap-based buffer overflow vulnerability in the GStreamer JPEG parser by providing a specially crafted JPEG file. This issue is caused by improper validation of Huffman table lengths, which can lead to arbitrary code execution in the context of the current process.

7.8 (High)
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Vendor Fix For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 https://access.redhat.com/errata/RHSA-2026:9446
Workaround Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
CVE-2026-3083

A flaw was found in GStreamer. This out-of-bounds write vulnerability exists within the `rtpqdm2depay` element, specifically during the processing of X-QDM Real-time Transport Protocol (RTP) payload elements. A remote attacker can exploit this by providing malformed user-supplied data to the `packetid` element, leading to a write past the end of an allocated array. Successful exploitation can result in arbitrary code execution in the context of the current process.

8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE-787 - Out-of-bounds Write
Vendor Fix For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 https://access.redhat.com/errata/RHSA-2026:9446
Workaround Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
CVE-2026-3085

A flaw was found in GStreamer. This heap-based buffer overflow vulnerability in the rtpqdm2depay component allows a remote attacker to execute arbitrary code. The flaw occurs due to insufficient validation of user-supplied data length during the processing of X-QDM Real-time Transport Protocol (RTP) payloads. Successful exploitation can lead to remote code execution within the context of the current process.

8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE-1284 - Improper Validation of Specified Quantity in Input
Vendor Fix For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 https://access.redhat.com/errata/RHSA-2026:9446
Workaround To mitigate this issue, avoid processing X-QDM RTP payloads from untrusted sources. Restricting network access to applications that utilize GStreamer for RTP stream processing can limit exposure.
References
https://access.redhat.com/errata/RHSA-2026:9446 self
https://access.redhat.com/security/updates/classi… external
https://bugzilla.redhat.com/show_bug.cgi?id=2447492 external
https://bugzilla.redhat.com/show_bug.cgi?id=2447495 external
https://bugzilla.redhat.com/show_bug.cgi?id=2447496 external
https://bugzilla.redhat.com/show_bug.cgi?id=2447498 external
https://security.access.redhat.com/data/csaf/v2/a… self
https://access.redhat.com/security/cve/CVE-2026-2921 self
https://bugzilla.redhat.com/show_bug.cgi?id=2447496 external
https://www.cve.org/CVERecord?id=CVE-2026-2921 external
https://nvd.nist.gov/vuln/detail/CVE-2026-2921 external
https://gitlab.freedesktop.org/gstreamer/gstreame… external
https://www.zerodayinitiative.com/advisories/ZDI-… external
https://access.redhat.com/security/cve/CVE-2026-3082 self
https://bugzilla.redhat.com/show_bug.cgi?id=2447492 external
https://www.cve.org/CVERecord?id=CVE-2026-3082 external
https://nvd.nist.gov/vuln/detail/CVE-2026-3082 external
https://gitlab.freedesktop.org/gstreamer/gstreame… external
https://www.zerodayinitiative.com/advisories/ZDI-… external
https://access.redhat.com/security/cve/CVE-2026-3083 self
https://bugzilla.redhat.com/show_bug.cgi?id=2447498 external
https://www.cve.org/CVERecord?id=CVE-2026-3083 external
https://nvd.nist.gov/vuln/detail/CVE-2026-3083 external
https://gitlab.freedesktop.org/gstreamer/gstreame… external
https://www.zerodayinitiative.com/advisories/ZDI-… external
https://access.redhat.com/security/cve/CVE-2026-3085 self
https://bugzilla.redhat.com/show_bug.cgi?id=2447495 external
https://www.cve.org/CVERecord?id=CVE-2026-3085 external
https://nvd.nist.gov/vuln/detail/CVE-2026-3085 external
https://www.zerodayinitiative.com/advisories/ZDI-… external
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for multiple packages is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer.\n\nSecurity Fix(es):\n\n* GStreamer: GStreamer: Remote Code Execution via heap-based buffer overflow in JPEG parser (CVE-2026-3082)\n\n* GStreamer: GStreamer: Remote Code Execution via Heap-based Buffer Overflow in rtpqdm2depay (CVE-2026-3085)\n\n* GStreamer: GStreamer: Arbitrary code execution via RIFF palette integer overflow in AVI file handling (CVE-2026-2921)\n\n* GStreamer: GStreamer: Remote Code Execution via Out-Of-Bounds Write in rtpqdm2depay (CVE-2026-3083)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:9446",
        "url": "https://access.redhat.com/errata/RHSA-2026:9446"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "2447492",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2447492"
      },
      {
        "category": "external",
        "summary": "2447495",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2447495"
      },
      {
        "category": "external",
        "summary": "2447496",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2447496"
      },
      {
        "category": "external",
        "summary": "2447498",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2447498"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_9446.json"
      }
    ],
    "title": "Red Hat Security Advisory: gstreamer1-plugins-bad-free, gstreamer1-plugins-base, and gstreamer1-plugins-good security update",
    "tracking": {
      "current_release_date": "2026-04-28T14:08:47+00:00",
      "generator": {
        "date": "2026-04-28T14:08:47+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.7.6"
        }
      },
      "id": "RHSA-2026:9446",
      "initial_release_date": "2026-04-21T17:40:20+00:00",
      "revision_history": [
        {
          "date": "2026-04-21T17:40:20+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-04-21T17:40:20+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-04-28T14:08:47+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream AUS (v.8.4)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream AUS (v.8.4)",
                  "product_id": "AppStream-8.4.0.Z.AUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_aus:8.4::appstream"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
                  "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_eus_long_life:8.4::appstream"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "gstreamer1-plugins-good-0:1.16.1-4.el8_4.src",
                "product": {
                  "name": "gstreamer1-plugins-good-0:1.16.1-4.el8_4.src",
                  "product_id": "gstreamer1-plugins-good-0:1.16.1-4.el8_4.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gstreamer1-plugins-good@1.16.1-4.el8_4?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.src",
                "product": {
                  "name": "gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.src",
                  "product_id": "gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gstreamer1-plugins-bad-free@1.16.1-4.el8_4?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gstreamer1-plugins-base-0:1.16.1-4.el8_4.src",
                "product": {
                  "name": "gstreamer1-plugins-base-0:1.16.1-4.el8_4.src",
                  "product_id": "gstreamer1-plugins-base-0:1.16.1-4.el8_4.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gstreamer1-plugins-base@1.16.1-4.el8_4?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "gstreamer1-plugins-good-0:1.16.1-4.el8_4.i686",
                "product": {
                  "name": "gstreamer1-plugins-good-0:1.16.1-4.el8_4.i686",
                  "product_id": "gstreamer1-plugins-good-0:1.16.1-4.el8_4.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gstreamer1-plugins-good@1.16.1-4.el8_4?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gstreamer1-plugins-good-gtk-0:1.16.1-4.el8_4.i686",
                "product": {
                  "name": "gstreamer1-plugins-good-gtk-0:1.16.1-4.el8_4.i686",
                  "product_id": "gstreamer1-plugins-good-gtk-0:1.16.1-4.el8_4.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gstreamer1-plugins-good-gtk@1.16.1-4.el8_4?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gstreamer1-plugins-good-debugsource-0:1.16.1-4.el8_4.i686",
                "product": {
                  "name": "gstreamer1-plugins-good-debugsource-0:1.16.1-4.el8_4.i686",
                  "product_id": "gstreamer1-plugins-good-debugsource-0:1.16.1-4.el8_4.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gstreamer1-plugins-good-debugsource@1.16.1-4.el8_4?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gstreamer1-plugins-good-debuginfo-0:1.16.1-4.el8_4.i686",
                "product": {
                  "name": "gstreamer1-plugins-good-debuginfo-0:1.16.1-4.el8_4.i686",
                  "product_id": "gstreamer1-plugins-good-debuginfo-0:1.16.1-4.el8_4.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gstreamer1-plugins-good-debuginfo@1.16.1-4.el8_4?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gstreamer1-plugins-good-gtk-debuginfo-0:1.16.1-4.el8_4.i686",
                "product": {
                  "name": "gstreamer1-plugins-good-gtk-debuginfo-0:1.16.1-4.el8_4.i686",
                  "product_id": "gstreamer1-plugins-good-gtk-debuginfo-0:1.16.1-4.el8_4.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gstreamer1-plugins-good-gtk-debuginfo@1.16.1-4.el8_4?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.i686",
                "product": {
                  "name": "gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.i686",
                  "product_id": "gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gstreamer1-plugins-bad-free@1.16.1-4.el8_4?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gstreamer1-plugins-bad-free-debugsource-0:1.16.1-4.el8_4.i686",
                "product": {
                  "name": "gstreamer1-plugins-bad-free-debugsource-0:1.16.1-4.el8_4.i686",
                  "product_id": "gstreamer1-plugins-bad-free-debugsource-0:1.16.1-4.el8_4.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gstreamer1-plugins-bad-free-debugsource@1.16.1-4.el8_4?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gstreamer1-plugins-bad-free-debuginfo-0:1.16.1-4.el8_4.i686",
                "product": {
                  "name": "gstreamer1-plugins-bad-free-debuginfo-0:1.16.1-4.el8_4.i686",
                  "product_id": "gstreamer1-plugins-bad-free-debuginfo-0:1.16.1-4.el8_4.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gstreamer1-plugins-bad-free-debuginfo@1.16.1-4.el8_4?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gstreamer1-plugins-base-0:1.16.1-4.el8_4.i686",
                "product": {
                  "name": "gstreamer1-plugins-base-0:1.16.1-4.el8_4.i686",
                  "product_id": "gstreamer1-plugins-base-0:1.16.1-4.el8_4.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gstreamer1-plugins-base@1.16.1-4.el8_4?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gstreamer1-plugins-base-devel-0:1.16.1-4.el8_4.i686",
                "product": {
                  "name": "gstreamer1-plugins-base-devel-0:1.16.1-4.el8_4.i686",
                  "product_id": "gstreamer1-plugins-base-devel-0:1.16.1-4.el8_4.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gstreamer1-plugins-base-devel@1.16.1-4.el8_4?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gstreamer1-plugins-base-debugsource-0:1.16.1-4.el8_4.i686",
                "product": {
                  "name": "gstreamer1-plugins-base-debugsource-0:1.16.1-4.el8_4.i686",
                  "product_id": "gstreamer1-plugins-base-debugsource-0:1.16.1-4.el8_4.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gstreamer1-plugins-base-debugsource@1.16.1-4.el8_4?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gstreamer1-plugins-base-debuginfo-0:1.16.1-4.el8_4.i686",
                "product": {
                  "name": "gstreamer1-plugins-base-debuginfo-0:1.16.1-4.el8_4.i686",
                  "product_id": "gstreamer1-plugins-base-debuginfo-0:1.16.1-4.el8_4.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gstreamer1-plugins-base-debuginfo@1.16.1-4.el8_4?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gstreamer1-plugins-base-tools-debuginfo-0:1.16.1-4.el8_4.i686",
                "product": {
                  "name": "gstreamer1-plugins-base-tools-debuginfo-0:1.16.1-4.el8_4.i686",
                  "product_id": "gstreamer1-plugins-base-tools-debuginfo-0:1.16.1-4.el8_4.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gstreamer1-plugins-base-tools-debuginfo@1.16.1-4.el8_4?arch=i686"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "gstreamer1-plugins-good-0:1.16.1-4.el8_4.x86_64",
                "product": {
                  "name": "gstreamer1-plugins-good-0:1.16.1-4.el8_4.x86_64",
                  "product_id": "gstreamer1-plugins-good-0:1.16.1-4.el8_4.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gstreamer1-plugins-good@1.16.1-4.el8_4?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gstreamer1-plugins-good-gtk-0:1.16.1-4.el8_4.x86_64",
                "product": {
                  "name": "gstreamer1-plugins-good-gtk-0:1.16.1-4.el8_4.x86_64",
                  "product_id": "gstreamer1-plugins-good-gtk-0:1.16.1-4.el8_4.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gstreamer1-plugins-good-gtk@1.16.1-4.el8_4?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gstreamer1-plugins-good-debugsource-0:1.16.1-4.el8_4.x86_64",
                "product": {
                  "name": "gstreamer1-plugins-good-debugsource-0:1.16.1-4.el8_4.x86_64",
                  "product_id": "gstreamer1-plugins-good-debugsource-0:1.16.1-4.el8_4.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gstreamer1-plugins-good-debugsource@1.16.1-4.el8_4?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gstreamer1-plugins-good-debuginfo-0:1.16.1-4.el8_4.x86_64",
                "product": {
                  "name": "gstreamer1-plugins-good-debuginfo-0:1.16.1-4.el8_4.x86_64",
                  "product_id": "gstreamer1-plugins-good-debuginfo-0:1.16.1-4.el8_4.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gstreamer1-plugins-good-debuginfo@1.16.1-4.el8_4?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gstreamer1-plugins-good-gtk-debuginfo-0:1.16.1-4.el8_4.x86_64",
                "product": {
                  "name": "gstreamer1-plugins-good-gtk-debuginfo-0:1.16.1-4.el8_4.x86_64",
                  "product_id": "gstreamer1-plugins-good-gtk-debuginfo-0:1.16.1-4.el8_4.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gstreamer1-plugins-good-gtk-debuginfo@1.16.1-4.el8_4?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.x86_64",
                "product": {
                  "name": "gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.x86_64",
                  "product_id": "gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gstreamer1-plugins-bad-free@1.16.1-4.el8_4?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gstreamer1-plugins-bad-free-debugsource-0:1.16.1-4.el8_4.x86_64",
                "product": {
                  "name": "gstreamer1-plugins-bad-free-debugsource-0:1.16.1-4.el8_4.x86_64",
                  "product_id": "gstreamer1-plugins-bad-free-debugsource-0:1.16.1-4.el8_4.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gstreamer1-plugins-bad-free-debugsource@1.16.1-4.el8_4?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gstreamer1-plugins-bad-free-debuginfo-0:1.16.1-4.el8_4.x86_64",
                "product": {
                  "name": "gstreamer1-plugins-bad-free-debuginfo-0:1.16.1-4.el8_4.x86_64",
                  "product_id": "gstreamer1-plugins-bad-free-debuginfo-0:1.16.1-4.el8_4.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gstreamer1-plugins-bad-free-debuginfo@1.16.1-4.el8_4?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gstreamer1-plugins-base-0:1.16.1-4.el8_4.x86_64",
                "product": {
                  "name": "gstreamer1-plugins-base-0:1.16.1-4.el8_4.x86_64",
                  "product_id": "gstreamer1-plugins-base-0:1.16.1-4.el8_4.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gstreamer1-plugins-base@1.16.1-4.el8_4?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gstreamer1-plugins-base-devel-0:1.16.1-4.el8_4.x86_64",
                "product": {
                  "name": "gstreamer1-plugins-base-devel-0:1.16.1-4.el8_4.x86_64",
                  "product_id": "gstreamer1-plugins-base-devel-0:1.16.1-4.el8_4.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gstreamer1-plugins-base-devel@1.16.1-4.el8_4?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gstreamer1-plugins-base-debugsource-0:1.16.1-4.el8_4.x86_64",
                "product": {
                  "name": "gstreamer1-plugins-base-debugsource-0:1.16.1-4.el8_4.x86_64",
                  "product_id": "gstreamer1-plugins-base-debugsource-0:1.16.1-4.el8_4.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gstreamer1-plugins-base-debugsource@1.16.1-4.el8_4?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gstreamer1-plugins-base-debuginfo-0:1.16.1-4.el8_4.x86_64",
                "product": {
                  "name": "gstreamer1-plugins-base-debuginfo-0:1.16.1-4.el8_4.x86_64",
                  "product_id": "gstreamer1-plugins-base-debuginfo-0:1.16.1-4.el8_4.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gstreamer1-plugins-base-debuginfo@1.16.1-4.el8_4?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gstreamer1-plugins-base-tools-debuginfo-0:1.16.1-4.el8_4.x86_64",
                "product": {
                  "name": "gstreamer1-plugins-base-tools-debuginfo-0:1.16.1-4.el8_4.x86_64",
                  "product_id": "gstreamer1-plugins-base-tools-debuginfo-0:1.16.1-4.el8_4.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gstreamer1-plugins-base-tools-debuginfo@1.16.1-4.el8_4?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.i686 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.i686"
        },
        "product_reference": "gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.i686",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.src as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.src"
        },
        "product_reference": "gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.src",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.x86_64"
        },
        "product_reference": "gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.x86_64",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-bad-free-debuginfo-0:1.16.1-4.el8_4.i686 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-debuginfo-0:1.16.1-4.el8_4.i686"
        },
        "product_reference": "gstreamer1-plugins-bad-free-debuginfo-0:1.16.1-4.el8_4.i686",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-bad-free-debuginfo-0:1.16.1-4.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-debuginfo-0:1.16.1-4.el8_4.x86_64"
        },
        "product_reference": "gstreamer1-plugins-bad-free-debuginfo-0:1.16.1-4.el8_4.x86_64",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-bad-free-debugsource-0:1.16.1-4.el8_4.i686 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-debugsource-0:1.16.1-4.el8_4.i686"
        },
        "product_reference": "gstreamer1-plugins-bad-free-debugsource-0:1.16.1-4.el8_4.i686",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-bad-free-debugsource-0:1.16.1-4.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-debugsource-0:1.16.1-4.el8_4.x86_64"
        },
        "product_reference": "gstreamer1-plugins-bad-free-debugsource-0:1.16.1-4.el8_4.x86_64",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-base-0:1.16.1-4.el8_4.i686 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-0:1.16.1-4.el8_4.i686"
        },
        "product_reference": "gstreamer1-plugins-base-0:1.16.1-4.el8_4.i686",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-base-0:1.16.1-4.el8_4.src as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-0:1.16.1-4.el8_4.src"
        },
        "product_reference": "gstreamer1-plugins-base-0:1.16.1-4.el8_4.src",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-base-0:1.16.1-4.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-0:1.16.1-4.el8_4.x86_64"
        },
        "product_reference": "gstreamer1-plugins-base-0:1.16.1-4.el8_4.x86_64",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-base-debuginfo-0:1.16.1-4.el8_4.i686 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-debuginfo-0:1.16.1-4.el8_4.i686"
        },
        "product_reference": "gstreamer1-plugins-base-debuginfo-0:1.16.1-4.el8_4.i686",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-base-debuginfo-0:1.16.1-4.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-debuginfo-0:1.16.1-4.el8_4.x86_64"
        },
        "product_reference": "gstreamer1-plugins-base-debuginfo-0:1.16.1-4.el8_4.x86_64",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-base-debugsource-0:1.16.1-4.el8_4.i686 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-debugsource-0:1.16.1-4.el8_4.i686"
        },
        "product_reference": "gstreamer1-plugins-base-debugsource-0:1.16.1-4.el8_4.i686",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-base-debugsource-0:1.16.1-4.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-debugsource-0:1.16.1-4.el8_4.x86_64"
        },
        "product_reference": "gstreamer1-plugins-base-debugsource-0:1.16.1-4.el8_4.x86_64",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-base-devel-0:1.16.1-4.el8_4.i686 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-devel-0:1.16.1-4.el8_4.i686"
        },
        "product_reference": "gstreamer1-plugins-base-devel-0:1.16.1-4.el8_4.i686",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-base-devel-0:1.16.1-4.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-devel-0:1.16.1-4.el8_4.x86_64"
        },
        "product_reference": "gstreamer1-plugins-base-devel-0:1.16.1-4.el8_4.x86_64",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-base-tools-debuginfo-0:1.16.1-4.el8_4.i686 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-tools-debuginfo-0:1.16.1-4.el8_4.i686"
        },
        "product_reference": "gstreamer1-plugins-base-tools-debuginfo-0:1.16.1-4.el8_4.i686",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-base-tools-debuginfo-0:1.16.1-4.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-tools-debuginfo-0:1.16.1-4.el8_4.x86_64"
        },
        "product_reference": "gstreamer1-plugins-base-tools-debuginfo-0:1.16.1-4.el8_4.x86_64",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-good-0:1.16.1-4.el8_4.i686 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-0:1.16.1-4.el8_4.i686"
        },
        "product_reference": "gstreamer1-plugins-good-0:1.16.1-4.el8_4.i686",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-good-0:1.16.1-4.el8_4.src as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-0:1.16.1-4.el8_4.src"
        },
        "product_reference": "gstreamer1-plugins-good-0:1.16.1-4.el8_4.src",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-good-0:1.16.1-4.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-0:1.16.1-4.el8_4.x86_64"
        },
        "product_reference": "gstreamer1-plugins-good-0:1.16.1-4.el8_4.x86_64",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-good-debuginfo-0:1.16.1-4.el8_4.i686 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-debuginfo-0:1.16.1-4.el8_4.i686"
        },
        "product_reference": "gstreamer1-plugins-good-debuginfo-0:1.16.1-4.el8_4.i686",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-good-debuginfo-0:1.16.1-4.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-debuginfo-0:1.16.1-4.el8_4.x86_64"
        },
        "product_reference": "gstreamer1-plugins-good-debuginfo-0:1.16.1-4.el8_4.x86_64",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-good-debugsource-0:1.16.1-4.el8_4.i686 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-debugsource-0:1.16.1-4.el8_4.i686"
        },
        "product_reference": "gstreamer1-plugins-good-debugsource-0:1.16.1-4.el8_4.i686",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-good-debugsource-0:1.16.1-4.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-debugsource-0:1.16.1-4.el8_4.x86_64"
        },
        "product_reference": "gstreamer1-plugins-good-debugsource-0:1.16.1-4.el8_4.x86_64",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-good-gtk-0:1.16.1-4.el8_4.i686 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-gtk-0:1.16.1-4.el8_4.i686"
        },
        "product_reference": "gstreamer1-plugins-good-gtk-0:1.16.1-4.el8_4.i686",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-good-gtk-0:1.16.1-4.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-gtk-0:1.16.1-4.el8_4.x86_64"
        },
        "product_reference": "gstreamer1-plugins-good-gtk-0:1.16.1-4.el8_4.x86_64",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-good-gtk-debuginfo-0:1.16.1-4.el8_4.i686 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-gtk-debuginfo-0:1.16.1-4.el8_4.i686"
        },
        "product_reference": "gstreamer1-plugins-good-gtk-debuginfo-0:1.16.1-4.el8_4.i686",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-good-gtk-debuginfo-0:1.16.1-4.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-gtk-debuginfo-0:1.16.1-4.el8_4.x86_64"
        },
        "product_reference": "gstreamer1-plugins-good-gtk-debuginfo-0:1.16.1-4.el8_4.x86_64",
        "relates_to_product_reference": "AppStream-8.4.0.Z.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.i686 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.i686"
        },
        "product_reference": "gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.i686",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.src as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.src"
        },
        "product_reference": "gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.src",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.x86_64"
        },
        "product_reference": "gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.x86_64",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-bad-free-debuginfo-0:1.16.1-4.el8_4.i686 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-debuginfo-0:1.16.1-4.el8_4.i686"
        },
        "product_reference": "gstreamer1-plugins-bad-free-debuginfo-0:1.16.1-4.el8_4.i686",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-bad-free-debuginfo-0:1.16.1-4.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-debuginfo-0:1.16.1-4.el8_4.x86_64"
        },
        "product_reference": "gstreamer1-plugins-bad-free-debuginfo-0:1.16.1-4.el8_4.x86_64",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-bad-free-debugsource-0:1.16.1-4.el8_4.i686 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-debugsource-0:1.16.1-4.el8_4.i686"
        },
        "product_reference": "gstreamer1-plugins-bad-free-debugsource-0:1.16.1-4.el8_4.i686",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-bad-free-debugsource-0:1.16.1-4.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-debugsource-0:1.16.1-4.el8_4.x86_64"
        },
        "product_reference": "gstreamer1-plugins-bad-free-debugsource-0:1.16.1-4.el8_4.x86_64",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-base-0:1.16.1-4.el8_4.i686 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-0:1.16.1-4.el8_4.i686"
        },
        "product_reference": "gstreamer1-plugins-base-0:1.16.1-4.el8_4.i686",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-base-0:1.16.1-4.el8_4.src as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-0:1.16.1-4.el8_4.src"
        },
        "product_reference": "gstreamer1-plugins-base-0:1.16.1-4.el8_4.src",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-base-0:1.16.1-4.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-0:1.16.1-4.el8_4.x86_64"
        },
        "product_reference": "gstreamer1-plugins-base-0:1.16.1-4.el8_4.x86_64",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-base-debuginfo-0:1.16.1-4.el8_4.i686 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-debuginfo-0:1.16.1-4.el8_4.i686"
        },
        "product_reference": "gstreamer1-plugins-base-debuginfo-0:1.16.1-4.el8_4.i686",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-base-debuginfo-0:1.16.1-4.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-debuginfo-0:1.16.1-4.el8_4.x86_64"
        },
        "product_reference": "gstreamer1-plugins-base-debuginfo-0:1.16.1-4.el8_4.x86_64",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-base-debugsource-0:1.16.1-4.el8_4.i686 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-debugsource-0:1.16.1-4.el8_4.i686"
        },
        "product_reference": "gstreamer1-plugins-base-debugsource-0:1.16.1-4.el8_4.i686",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-base-debugsource-0:1.16.1-4.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-debugsource-0:1.16.1-4.el8_4.x86_64"
        },
        "product_reference": "gstreamer1-plugins-base-debugsource-0:1.16.1-4.el8_4.x86_64",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-base-devel-0:1.16.1-4.el8_4.i686 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-devel-0:1.16.1-4.el8_4.i686"
        },
        "product_reference": "gstreamer1-plugins-base-devel-0:1.16.1-4.el8_4.i686",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-base-devel-0:1.16.1-4.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-devel-0:1.16.1-4.el8_4.x86_64"
        },
        "product_reference": "gstreamer1-plugins-base-devel-0:1.16.1-4.el8_4.x86_64",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-base-tools-debuginfo-0:1.16.1-4.el8_4.i686 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-tools-debuginfo-0:1.16.1-4.el8_4.i686"
        },
        "product_reference": "gstreamer1-plugins-base-tools-debuginfo-0:1.16.1-4.el8_4.i686",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-base-tools-debuginfo-0:1.16.1-4.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-tools-debuginfo-0:1.16.1-4.el8_4.x86_64"
        },
        "product_reference": "gstreamer1-plugins-base-tools-debuginfo-0:1.16.1-4.el8_4.x86_64",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-good-0:1.16.1-4.el8_4.i686 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-0:1.16.1-4.el8_4.i686"
        },
        "product_reference": "gstreamer1-plugins-good-0:1.16.1-4.el8_4.i686",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-good-0:1.16.1-4.el8_4.src as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-0:1.16.1-4.el8_4.src"
        },
        "product_reference": "gstreamer1-plugins-good-0:1.16.1-4.el8_4.src",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-good-0:1.16.1-4.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-0:1.16.1-4.el8_4.x86_64"
        },
        "product_reference": "gstreamer1-plugins-good-0:1.16.1-4.el8_4.x86_64",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-good-debuginfo-0:1.16.1-4.el8_4.i686 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-debuginfo-0:1.16.1-4.el8_4.i686"
        },
        "product_reference": "gstreamer1-plugins-good-debuginfo-0:1.16.1-4.el8_4.i686",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-good-debuginfo-0:1.16.1-4.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-debuginfo-0:1.16.1-4.el8_4.x86_64"
        },
        "product_reference": "gstreamer1-plugins-good-debuginfo-0:1.16.1-4.el8_4.x86_64",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-good-debugsource-0:1.16.1-4.el8_4.i686 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-debugsource-0:1.16.1-4.el8_4.i686"
        },
        "product_reference": "gstreamer1-plugins-good-debugsource-0:1.16.1-4.el8_4.i686",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-good-debugsource-0:1.16.1-4.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-debugsource-0:1.16.1-4.el8_4.x86_64"
        },
        "product_reference": "gstreamer1-plugins-good-debugsource-0:1.16.1-4.el8_4.x86_64",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-good-gtk-0:1.16.1-4.el8_4.i686 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-gtk-0:1.16.1-4.el8_4.i686"
        },
        "product_reference": "gstreamer1-plugins-good-gtk-0:1.16.1-4.el8_4.i686",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-good-gtk-0:1.16.1-4.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-gtk-0:1.16.1-4.el8_4.x86_64"
        },
        "product_reference": "gstreamer1-plugins-good-gtk-0:1.16.1-4.el8_4.x86_64",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-good-gtk-debuginfo-0:1.16.1-4.el8_4.i686 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-gtk-debuginfo-0:1.16.1-4.el8_4.i686"
        },
        "product_reference": "gstreamer1-plugins-good-gtk-debuginfo-0:1.16.1-4.el8_4.i686",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-good-gtk-debuginfo-0:1.16.1-4.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)",
          "product_id": "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-gtk-debuginfo-0:1.16.1-4.el8_4.x86_64"
        },
        "product_reference": "gstreamer1-plugins-good-gtk-debuginfo-0:1.16.1-4.el8_4.x86_64",
        "relates_to_product_reference": "AppStream-8.4.0.Z.EUS.EXTENSION"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-2921",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2026-03-13T21:02:05.060897+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2447496"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in GStreamer. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. The flaw exists within the handling of palette data in AVI files, where a lack of proper validation of user-supplied data can lead to an integer overflow before writing to memory. An attacker can leverage this integer overflow to execute code in the context of the current process.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "GStreamer: GStreamer: Arbitrary code execution via RIFF palette integer overflow in AVI file handling",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an IMPORTANT vulnerability in GStreamer that allows arbitrary code execution. The flaw occurs due to an integer overflow when processing palette data in specially crafted AVI files. Exploitation requires a user to process a malicious AVI file with an application linked against the GStreamer library.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.src",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-debuginfo-0:1.16.1-4.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-debuginfo-0:1.16.1-4.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-debugsource-0:1.16.1-4.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-debugsource-0:1.16.1-4.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-0:1.16.1-4.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-0:1.16.1-4.el8_4.src",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-0:1.16.1-4.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-debuginfo-0:1.16.1-4.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-debuginfo-0:1.16.1-4.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-debugsource-0:1.16.1-4.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-debugsource-0:1.16.1-4.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-devel-0:1.16.1-4.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-devel-0:1.16.1-4.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-tools-debuginfo-0:1.16.1-4.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-tools-debuginfo-0:1.16.1-4.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-0:1.16.1-4.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-0:1.16.1-4.el8_4.src",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-0:1.16.1-4.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-debuginfo-0:1.16.1-4.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-debuginfo-0:1.16.1-4.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-debugsource-0:1.16.1-4.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-debugsource-0:1.16.1-4.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-gtk-0:1.16.1-4.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-gtk-0:1.16.1-4.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-gtk-debuginfo-0:1.16.1-4.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-gtk-debuginfo-0:1.16.1-4.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.src",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-debuginfo-0:1.16.1-4.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-debuginfo-0:1.16.1-4.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-debugsource-0:1.16.1-4.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-debugsource-0:1.16.1-4.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-0:1.16.1-4.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-0:1.16.1-4.el8_4.src",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-0:1.16.1-4.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-debuginfo-0:1.16.1-4.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-debuginfo-0:1.16.1-4.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-debugsource-0:1.16.1-4.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-debugsource-0:1.16.1-4.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-devel-0:1.16.1-4.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-devel-0:1.16.1-4.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-tools-debuginfo-0:1.16.1-4.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-tools-debuginfo-0:1.16.1-4.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-0:1.16.1-4.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-0:1.16.1-4.el8_4.src",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-0:1.16.1-4.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-debuginfo-0:1.16.1-4.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-debuginfo-0:1.16.1-4.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-debugsource-0:1.16.1-4.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-debugsource-0:1.16.1-4.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-gtk-0:1.16.1-4.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-gtk-0:1.16.1-4.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-gtk-debuginfo-0:1.16.1-4.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-gtk-debuginfo-0:1.16.1-4.el8_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-2921"
        },
        {
          "category": "external",
          "summary": "RHBZ#2447496",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2447496"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-2921",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-2921"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-2921",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-2921"
        },
        {
          "category": "external",
          "summary": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/e3a99c35266fc92dd6a18ac5fde028d0cda559e6",
          "url": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/e3a99c35266fc92dd6a18ac5fde028d0cda559e6"
        },
        {
          "category": "external",
          "summary": "https://www.zerodayinitiative.com/advisories/ZDI-26-168/",
          "url": "https://www.zerodayinitiative.com/advisories/ZDI-26-168/"
        }
      ],
      "release_date": "2026-03-13T20:41:50.780000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-04-21T17:40:20+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.src",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-debugsource-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-debugsource-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-0:1.16.1-4.el8_4.src",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-debugsource-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-debugsource-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-devel-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-devel-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-tools-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-tools-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-0:1.16.1-4.el8_4.src",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-debugsource-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-debugsource-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-gtk-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-gtk-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-gtk-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-gtk-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.src",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-debugsource-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-debugsource-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-0:1.16.1-4.el8_4.src",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-debugsource-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-debugsource-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-devel-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-devel-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-tools-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-tools-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-0:1.16.1-4.el8_4.src",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-debugsource-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-debugsource-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-gtk-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-gtk-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-gtk-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-gtk-debuginfo-0:1.16.1-4.el8_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:9446"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, avoid processing untrusted AVI media files with applications that use the GStreamer library. Users should exercise caution when opening or playing AVI files from unknown or suspicious sources.",
          "product_ids": [
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.src",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-debugsource-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-debugsource-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-0:1.16.1-4.el8_4.src",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-debugsource-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-debugsource-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-devel-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-devel-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-tools-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-tools-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-0:1.16.1-4.el8_4.src",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-debugsource-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-debugsource-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-gtk-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-gtk-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-gtk-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-gtk-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.src",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-debugsource-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-debugsource-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-0:1.16.1-4.el8_4.src",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-debugsource-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-debugsource-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-devel-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-devel-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-tools-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-tools-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-0:1.16.1-4.el8_4.src",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-debugsource-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-debugsource-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-gtk-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-gtk-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-gtk-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-gtk-debuginfo-0:1.16.1-4.el8_4.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.src",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-debugsource-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-debugsource-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-0:1.16.1-4.el8_4.src",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-debugsource-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-debugsource-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-devel-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-devel-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-tools-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-tools-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-0:1.16.1-4.el8_4.src",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-debugsource-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-debugsource-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-gtk-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-gtk-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-gtk-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-gtk-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.src",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-debugsource-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-debugsource-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-0:1.16.1-4.el8_4.src",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-debugsource-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-debugsource-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-devel-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-devel-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-tools-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-tools-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-0:1.16.1-4.el8_4.src",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-debugsource-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-debugsource-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-gtk-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-gtk-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-gtk-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-gtk-debuginfo-0:1.16.1-4.el8_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "GStreamer: GStreamer: Arbitrary code execution via RIFF palette integer overflow in AVI file handling"
    },
    {
      "cve": "CVE-2026-3082",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
      },
      "discovery_date": "2026-03-13T21:01:52.652019+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2447492"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in GStreamer. A remote attacker can exploit a heap-based buffer overflow vulnerability in the GStreamer JPEG parser by providing a specially crafted JPEG file. This issue is caused by improper validation of Huffman table lengths, which can lead to arbitrary code execution in the context of the current process.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "GStreamer: GStreamer: Remote Code Execution via heap-based buffer overflow in JPEG parser",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an IMPORTANT heap-based buffer overflow vulnerability in the GStreamer JPEG parser. The flaw allows remote code execution when processing a specially crafted JPEG file due to improper validation of Huffman table lengths. Red Hat products utilizing GStreamer to process untrusted JPEG content are affected.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.src",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-debuginfo-0:1.16.1-4.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-debuginfo-0:1.16.1-4.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-debugsource-0:1.16.1-4.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-debugsource-0:1.16.1-4.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-0:1.16.1-4.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-0:1.16.1-4.el8_4.src",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-0:1.16.1-4.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-debuginfo-0:1.16.1-4.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-debuginfo-0:1.16.1-4.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-debugsource-0:1.16.1-4.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-debugsource-0:1.16.1-4.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-devel-0:1.16.1-4.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-devel-0:1.16.1-4.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-tools-debuginfo-0:1.16.1-4.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-tools-debuginfo-0:1.16.1-4.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-0:1.16.1-4.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-0:1.16.1-4.el8_4.src",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-0:1.16.1-4.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-debuginfo-0:1.16.1-4.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-debuginfo-0:1.16.1-4.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-debugsource-0:1.16.1-4.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-debugsource-0:1.16.1-4.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-gtk-0:1.16.1-4.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-gtk-0:1.16.1-4.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-gtk-debuginfo-0:1.16.1-4.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-gtk-debuginfo-0:1.16.1-4.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.src",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-debuginfo-0:1.16.1-4.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-debuginfo-0:1.16.1-4.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-debugsource-0:1.16.1-4.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-debugsource-0:1.16.1-4.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-0:1.16.1-4.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-0:1.16.1-4.el8_4.src",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-0:1.16.1-4.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-debuginfo-0:1.16.1-4.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-debuginfo-0:1.16.1-4.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-debugsource-0:1.16.1-4.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-debugsource-0:1.16.1-4.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-devel-0:1.16.1-4.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-devel-0:1.16.1-4.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-tools-debuginfo-0:1.16.1-4.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-tools-debuginfo-0:1.16.1-4.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-0:1.16.1-4.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-0:1.16.1-4.el8_4.src",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-0:1.16.1-4.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-debuginfo-0:1.16.1-4.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-debuginfo-0:1.16.1-4.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-debugsource-0:1.16.1-4.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-debugsource-0:1.16.1-4.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-gtk-0:1.16.1-4.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-gtk-0:1.16.1-4.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-gtk-debuginfo-0:1.16.1-4.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-gtk-debuginfo-0:1.16.1-4.el8_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-3082"
        },
        {
          "category": "external",
          "summary": "RHBZ#2447492",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2447492"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-3082",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-3082"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-3082",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-3082"
        },
        {
          "category": "external",
          "summary": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/7d3c258ed928cf59d126c8ea926b185f046f444c",
          "url": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/7d3c258ed928cf59d126c8ea926b185f046f444c"
        },
        {
          "category": "external",
          "summary": "https://www.zerodayinitiative.com/advisories/ZDI-26-163/",
          "url": "https://www.zerodayinitiative.com/advisories/ZDI-26-163/"
        }
      ],
      "release_date": "2026-03-13T20:39:33.772000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-04-21T17:40:20+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.src",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-debugsource-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-debugsource-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-0:1.16.1-4.el8_4.src",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-debugsource-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-debugsource-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-devel-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-devel-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-tools-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-tools-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-0:1.16.1-4.el8_4.src",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-debugsource-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-debugsource-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-gtk-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-gtk-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-gtk-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-gtk-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.src",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-debugsource-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-debugsource-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-0:1.16.1-4.el8_4.src",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-debugsource-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-debugsource-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-devel-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-devel-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-tools-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-tools-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-0:1.16.1-4.el8_4.src",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-debugsource-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-debugsource-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-gtk-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-gtk-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-gtk-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-gtk-debuginfo-0:1.16.1-4.el8_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:9446"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.src",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-debugsource-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-debugsource-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-0:1.16.1-4.el8_4.src",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-debugsource-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-debugsource-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-devel-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-devel-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-tools-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-tools-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-0:1.16.1-4.el8_4.src",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-debugsource-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-debugsource-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-gtk-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-gtk-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-gtk-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-gtk-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.src",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-debugsource-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-debugsource-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-0:1.16.1-4.el8_4.src",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-debugsource-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-debugsource-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-devel-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-devel-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-tools-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-tools-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-0:1.16.1-4.el8_4.src",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-debugsource-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-debugsource-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-gtk-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-gtk-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-gtk-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-gtk-debuginfo-0:1.16.1-4.el8_4.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.src",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-debugsource-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-debugsource-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-0:1.16.1-4.el8_4.src",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-debugsource-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-debugsource-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-devel-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-devel-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-tools-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-tools-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-0:1.16.1-4.el8_4.src",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-debugsource-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-debugsource-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-gtk-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-gtk-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-gtk-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-gtk-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.src",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-debugsource-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-debugsource-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-0:1.16.1-4.el8_4.src",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-debugsource-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-debugsource-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-devel-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-devel-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-tools-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-tools-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-0:1.16.1-4.el8_4.src",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-debugsource-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-debugsource-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-gtk-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-gtk-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-gtk-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-gtk-debuginfo-0:1.16.1-4.el8_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "GStreamer: GStreamer: Remote Code Execution via heap-based buffer overflow in JPEG parser"
    },
    {
      "cve": "CVE-2026-3083",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "discovery_date": "2026-03-13T21:02:11.232291+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2447498"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in GStreamer. This out-of-bounds write vulnerability exists within the `rtpqdm2depay` element, specifically during the processing of X-QDM Real-time Transport Protocol (RTP) payload elements. A remote attacker can exploit this by providing malformed user-supplied data to the `packetid` element, leading to a write past the end of an allocated array. Successful exploitation can result in arbitrary code execution in the context of the current process.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "GStreamer: GStreamer: Remote Code Execution via Out-Of-Bounds Write in rtpqdm2depay",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This IMPORTANT vulnerability in GStreamer allows remote code execution due to an out-of-bounds write when processing X-QDM RTP payload elements. Red Hat products using GStreamer for RTP stream handling are affected if they process untrusted media streams.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.src",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-debuginfo-0:1.16.1-4.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-debuginfo-0:1.16.1-4.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-debugsource-0:1.16.1-4.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-debugsource-0:1.16.1-4.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-0:1.16.1-4.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-0:1.16.1-4.el8_4.src",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-0:1.16.1-4.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-debuginfo-0:1.16.1-4.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-debuginfo-0:1.16.1-4.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-debugsource-0:1.16.1-4.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-debugsource-0:1.16.1-4.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-devel-0:1.16.1-4.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-devel-0:1.16.1-4.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-tools-debuginfo-0:1.16.1-4.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-tools-debuginfo-0:1.16.1-4.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-0:1.16.1-4.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-0:1.16.1-4.el8_4.src",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-0:1.16.1-4.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-debuginfo-0:1.16.1-4.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-debuginfo-0:1.16.1-4.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-debugsource-0:1.16.1-4.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-debugsource-0:1.16.1-4.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-gtk-0:1.16.1-4.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-gtk-0:1.16.1-4.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-gtk-debuginfo-0:1.16.1-4.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-gtk-debuginfo-0:1.16.1-4.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.src",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-debuginfo-0:1.16.1-4.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-debuginfo-0:1.16.1-4.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-debugsource-0:1.16.1-4.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-debugsource-0:1.16.1-4.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-0:1.16.1-4.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-0:1.16.1-4.el8_4.src",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-0:1.16.1-4.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-debuginfo-0:1.16.1-4.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-debuginfo-0:1.16.1-4.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-debugsource-0:1.16.1-4.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-debugsource-0:1.16.1-4.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-devel-0:1.16.1-4.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-devel-0:1.16.1-4.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-tools-debuginfo-0:1.16.1-4.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-tools-debuginfo-0:1.16.1-4.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-0:1.16.1-4.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-0:1.16.1-4.el8_4.src",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-0:1.16.1-4.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-debuginfo-0:1.16.1-4.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-debuginfo-0:1.16.1-4.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-debugsource-0:1.16.1-4.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-debugsource-0:1.16.1-4.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-gtk-0:1.16.1-4.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-gtk-0:1.16.1-4.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-gtk-debuginfo-0:1.16.1-4.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-gtk-debuginfo-0:1.16.1-4.el8_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-3083"
        },
        {
          "category": "external",
          "summary": "RHBZ#2447498",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2447498"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-3083",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-3083"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-3083",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-3083"
        },
        {
          "category": "external",
          "summary": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/d60a94dee3c0a0942c9981491bf83e0de1900fbf",
          "url": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/d60a94dee3c0a0942c9981491bf83e0de1900fbf"
        },
        {
          "category": "external",
          "summary": "https://www.zerodayinitiative.com/advisories/ZDI-26-166/",
          "url": "https://www.zerodayinitiative.com/advisories/ZDI-26-166/"
        }
      ],
      "release_date": "2026-03-13T20:41:31.185000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-04-21T17:40:20+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.src",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-debugsource-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-debugsource-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-0:1.16.1-4.el8_4.src",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-debugsource-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-debugsource-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-devel-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-devel-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-tools-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-tools-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-0:1.16.1-4.el8_4.src",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-debugsource-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-debugsource-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-gtk-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-gtk-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-gtk-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-gtk-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.src",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-debugsource-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-debugsource-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-0:1.16.1-4.el8_4.src",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-debugsource-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-debugsource-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-devel-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-devel-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-tools-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-tools-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-0:1.16.1-4.el8_4.src",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-debugsource-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-debugsource-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-gtk-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-gtk-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-gtk-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-gtk-debuginfo-0:1.16.1-4.el8_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:9446"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.src",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-debugsource-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-debugsource-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-0:1.16.1-4.el8_4.src",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-debugsource-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-debugsource-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-devel-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-devel-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-tools-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-tools-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-0:1.16.1-4.el8_4.src",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-debugsource-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-debugsource-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-gtk-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-gtk-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-gtk-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-gtk-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.src",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-debugsource-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-debugsource-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-0:1.16.1-4.el8_4.src",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-debugsource-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-debugsource-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-devel-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-devel-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-tools-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-tools-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-0:1.16.1-4.el8_4.src",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-debugsource-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-debugsource-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-gtk-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-gtk-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-gtk-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-gtk-debuginfo-0:1.16.1-4.el8_4.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.src",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-debugsource-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-debugsource-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-0:1.16.1-4.el8_4.src",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-debugsource-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-debugsource-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-devel-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-devel-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-tools-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-tools-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-0:1.16.1-4.el8_4.src",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-debugsource-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-debugsource-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-gtk-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-gtk-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-gtk-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-gtk-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.src",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-debugsource-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-debugsource-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-0:1.16.1-4.el8_4.src",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-debugsource-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-debugsource-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-devel-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-devel-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-tools-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-tools-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-0:1.16.1-4.el8_4.src",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-debugsource-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-debugsource-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-gtk-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-gtk-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-gtk-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-gtk-debuginfo-0:1.16.1-4.el8_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "GStreamer: GStreamer: Remote Code Execution via Out-Of-Bounds Write in rtpqdm2depay"
    },
    {
      "cve": "CVE-2026-3085",
      "cwe": {
        "id": "CWE-1284",
        "name": "Improper Validation of Specified Quantity in Input"
      },
      "discovery_date": "2026-03-13T21:02:01.642993+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2447495"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in GStreamer. This heap-based buffer overflow vulnerability in the rtpqdm2depay component allows a remote attacker to execute arbitrary code. The flaw occurs due to insufficient validation of user-supplied data length during the processing of X-QDM Real-time Transport Protocol (RTP) payloads. Successful exploitation can lead to remote code execution within the context of the current process.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "GStreamer: GStreamer: Remote Code Execution via Heap-based Buffer Overflow in rtpqdm2depay",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an IMPORTANT vulnerability in the GStreamer rtpqdm2depay plugin. The flaw enables remote code execution through a heap-based buffer overflow when processing specially crafted X-QDM RTP payloads. Exploitation requires an application to interact with the vulnerable GStreamer library to process such untrusted media streams.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.src",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-debuginfo-0:1.16.1-4.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-debuginfo-0:1.16.1-4.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-debugsource-0:1.16.1-4.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-debugsource-0:1.16.1-4.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-0:1.16.1-4.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-0:1.16.1-4.el8_4.src",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-0:1.16.1-4.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-debuginfo-0:1.16.1-4.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-debuginfo-0:1.16.1-4.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-debugsource-0:1.16.1-4.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-debugsource-0:1.16.1-4.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-devel-0:1.16.1-4.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-devel-0:1.16.1-4.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-tools-debuginfo-0:1.16.1-4.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-tools-debuginfo-0:1.16.1-4.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-0:1.16.1-4.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-0:1.16.1-4.el8_4.src",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-0:1.16.1-4.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-debuginfo-0:1.16.1-4.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-debuginfo-0:1.16.1-4.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-debugsource-0:1.16.1-4.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-debugsource-0:1.16.1-4.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-gtk-0:1.16.1-4.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-gtk-0:1.16.1-4.el8_4.x86_64",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-gtk-debuginfo-0:1.16.1-4.el8_4.i686",
          "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-gtk-debuginfo-0:1.16.1-4.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.src",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-debuginfo-0:1.16.1-4.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-debuginfo-0:1.16.1-4.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-debugsource-0:1.16.1-4.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-debugsource-0:1.16.1-4.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-0:1.16.1-4.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-0:1.16.1-4.el8_4.src",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-0:1.16.1-4.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-debuginfo-0:1.16.1-4.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-debuginfo-0:1.16.1-4.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-debugsource-0:1.16.1-4.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-debugsource-0:1.16.1-4.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-devel-0:1.16.1-4.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-devel-0:1.16.1-4.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-tools-debuginfo-0:1.16.1-4.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-tools-debuginfo-0:1.16.1-4.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-0:1.16.1-4.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-0:1.16.1-4.el8_4.src",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-0:1.16.1-4.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-debuginfo-0:1.16.1-4.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-debuginfo-0:1.16.1-4.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-debugsource-0:1.16.1-4.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-debugsource-0:1.16.1-4.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-gtk-0:1.16.1-4.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-gtk-0:1.16.1-4.el8_4.x86_64",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-gtk-debuginfo-0:1.16.1-4.el8_4.i686",
          "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-gtk-debuginfo-0:1.16.1-4.el8_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-3085"
        },
        {
          "category": "external",
          "summary": "RHBZ#2447495",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2447495"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-3085",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-3085"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-3085",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-3085"
        },
        {
          "category": "external",
          "summary": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/d60a94dee3c0a0942c9981491bf83e0de1900fbf",
          "url": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/d60a94dee3c0a0942c9981491bf83e0de1900fbf"
        },
        {
          "category": "external",
          "summary": "https://www.zerodayinitiative.com/advisories/ZDI-26-167/",
          "url": "https://www.zerodayinitiative.com/advisories/ZDI-26-167/"
        }
      ],
      "release_date": "2026-03-13T20:40:02.186000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-04-21T17:40:20+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.src",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-debugsource-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-debugsource-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-0:1.16.1-4.el8_4.src",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-debugsource-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-debugsource-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-devel-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-devel-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-tools-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-tools-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-0:1.16.1-4.el8_4.src",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-debugsource-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-debugsource-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-gtk-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-gtk-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-gtk-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-gtk-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.src",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-debugsource-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-debugsource-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-0:1.16.1-4.el8_4.src",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-debugsource-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-debugsource-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-devel-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-devel-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-tools-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-tools-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-0:1.16.1-4.el8_4.src",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-debugsource-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-debugsource-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-gtk-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-gtk-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-gtk-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-gtk-debuginfo-0:1.16.1-4.el8_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:9446"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, avoid processing X-QDM RTP payloads from untrusted sources. Restricting network access to applications that utilize GStreamer for RTP stream processing can limit exposure.",
          "product_ids": [
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.src",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-debugsource-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-debugsource-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-0:1.16.1-4.el8_4.src",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-debugsource-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-debugsource-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-devel-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-devel-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-tools-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-tools-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-0:1.16.1-4.el8_4.src",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-debugsource-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-debugsource-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-gtk-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-gtk-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-gtk-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-gtk-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.src",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-debugsource-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-debugsource-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-0:1.16.1-4.el8_4.src",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-debugsource-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-debugsource-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-devel-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-devel-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-tools-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-tools-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-0:1.16.1-4.el8_4.src",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-debugsource-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-debugsource-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-gtk-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-gtk-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-gtk-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-gtk-debuginfo-0:1.16.1-4.el8_4.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.src",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-debugsource-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-bad-free-debugsource-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-0:1.16.1-4.el8_4.src",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-debugsource-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-debugsource-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-devel-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-devel-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-tools-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-base-tools-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-0:1.16.1-4.el8_4.src",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-debugsource-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-debugsource-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-gtk-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-gtk-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-gtk-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.AUS:gstreamer1-plugins-good-gtk-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.src",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-debugsource-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-bad-free-debugsource-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-0:1.16.1-4.el8_4.src",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-debugsource-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-debugsource-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-devel-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-devel-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-tools-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-base-tools-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-0:1.16.1-4.el8_4.src",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-debuginfo-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-debugsource-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-debugsource-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-gtk-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-gtk-0:1.16.1-4.el8_4.x86_64",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-gtk-debuginfo-0:1.16.1-4.el8_4.i686",
            "AppStream-8.4.0.Z.EUS.EXTENSION:gstreamer1-plugins-good-gtk-debuginfo-0:1.16.1-4.el8_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "GStreamer: GStreamer: Remote Code Execution via Heap-based Buffer Overflow in rtpqdm2depay"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Detection rules are retrieved from Rulezet.